Researchers Bound Quantum Key Recovery Time and Storage Costs

New limits for breaking quantum cryptography exist. A time-space tradeoff shows an adversary making T queries with S qubits recovers a random key with probability no more than approximately (T squared plus the square root of ST) divided by N, where N represents two raised to the power of n. Quantum methods offer benefits over classical ones when facing attacks utilising pre-shared information; specifically reducing required communication from N qubits to n qubits while maintaining equivalent security up to a factor of N².

These boundaries establish using the random oracle model, a simplified assumption where cryptographers treat functions like truly random black boxes to focus on core security properties without implementation details. This enables isolation of fundamental limitations rather than distraction by practical considerations.

Reduced Qubit Requirements Tighten Bounds on Quantum Cryptographic Security

Scientists at Princeton have dramatically reduced the resources needed to break quantum cryptography. Their findings demonstrate that an adversary requires only ‘S’ qubits of non-uniform advice in addition to time ‘T to achieve a specific level of compromise. This breakthrough establishes near-optimal limits on both computation time and qubit usage, defining how efficiently an attacker can compromise these systems within the random oracle model. By expressing potential attacks as operator norms, quantifying attack strength, and bounding their value using trace moments alongside compressed oracles, they simplify existing post-quantum cryptanalysis techniques.

A T-query adversary with S qubits can recover a key with probability at most O( (T2 + sqrt(ST))/N ), representing a reduction from space complexity N to N2. This contrasts sharply with previous classical limits requiring space equivalent to N2, where ‘n’ represents the number of qubits in the cryptographic system. Analysis also tightens existing work regarding post-quantum pseudorandom generators, achieving a distinguishing advantage bound of O((T2)/N + sqrt(ST/N)).

This improved efficiency offers a pathway towards designing quantum cryptographic systems needing fewer resources than previously thought, which is particularly relevant given growing demand for secure communication and advances in computing power. Simplifying calculations via compressed oracles introduces a trade-off between cryptographic security and computational efficiency because these ‘black box’ functions inevitably create vulnerabilities.

Despite this inherent tension, demonstrating quantum advantages over classical methods remains vital as computing capabilities advance. This improvement stems from expressing optimal preprocessing attacks as operator norms of random matrices and bounding their values using trace moments alongside compressed oracles; consequently, tighter boundaries on attack complexity are achievable.

Current limitations focus on theoretical limits within an idealised model that does not account for practical overheads associated with implementing compressed oracles or complexities inherent in real-world quantum hardware.

The research demonstrates a new advantage for quantum cryptography over classical methods by establishing a limit to how efficiently an adversary can break the encryption. This represents a reduction from space complexity of N to N2, requiring less computational space than previously understood limits of N2. The methodology involved expressing attacks as operator norms and bounding them via trace moments utilising compressed oracles; further analysis also tightened existing bounds on post-quantum pseudorandom generators achieving O((T2)/N + sqrt(ST/N)).

👉 More information
🗞 Time-space lower bounds for breaking quantum cryptography
✍️ Fangqi Dong and Alex Lombardi (Affiliation: Princeton)
🧠 ArXiv: https://arxiv.org/abs/2610.02101

Stay current

See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.

Avatar of Ivy Delaney

Ivy Delaney

Ivy Delaney has been working with neural networks and machine learning since the mid-nineties, back when a couple of hidden layers and a long afternoon of training counted as ambitious. She has watched the field go from academic curiosity to the thing quietly running underneath everything, and she brings that long view to quantum computing. For Quantum Zeitgeist she covers the ground where the two fields meet. That means quantum machine learning and the variational algorithms it leans on, and it also means the less glamorous but more interesting story of classical machine learning already doing real work inside quantum machines, decoding error-correcting codes, calibrating noisy hardware and learning the error models that simulators depend on. She writes about the hardware those algorithms have to run on too, and about the post-quantum cryptography scramble that the same hardware has set off. Her stories typically start with the paper, whether that is peer-reviewed work, conference proceedings or an arXiv preprint, with the source linked so you can hold a claim up against the research it came from. She is unimpressed by benchmarks that will not say what they beat, and by demonstrations that only work in the press release.

Latest Posts by Ivy Delaney: